Data & infrastructure
-
NCSC puts CNI resilience into design
The NCSC’s operational technology guidance pushes critical infrastructure operators towards secure design, segmentation, monitoring, and specialist testing.
-
EU-US data deal faces independence test
noyb says a US Supreme Court ruling has weakened the FTC’s independence, putting a key enforcement pillar of the EU-US Data Privacy Framework under pressure.
-
Cisco flaw reaches network management layer
Cisco’s July advisory set includes a Catalyst Center arbitrary file read flaw, putting network management platforms back into patch planning.
-
AutoJack breaks localhost trust in AI agents
Microsoft’s AutoJack research shows how a malicious web page rendered by an AI browsing agent can reach local control planes.
-
Intruder opens exposure management free tier
Intruder’s permanent free plan gives smaller organisations access to vulnerability scans, cloud checks, attack surface monitoring, and limited AI pentesting.
-
Ofgem puts supplier security into energy resilience
Ofgem’s downstream gas and electricity guidance points to a more structured model for managing supplier security risk across the UK energy system.
-
Check Point enters AWS sovereign cloud
Check Point’s Cloud Firewall availability on AWS European Sovereign Cloud adds security tooling to Europe’s regulated cloud procurement market.
-
EU tech sovereignty targets dependency
The Commission’s tech sovereignty package links cloud, AI, chips, open source, and energy digitalisation to Europe’s digital dependency problem.
-
DORA incidents expose cross-border finance risk
EU supervisors’ first DORA incident report shows how ICT failures and shared providers can spread disruption across financial services.
-
BlueHammer reaches ransomware exposure
CISA’s ransomware link for Microsoft Defender’s BlueHammer flaw changes the operational framing from routine patching to endpoint privilege and containment.